High
CVE-2019-14206
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-15827
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
High
CVE-2019-5993
Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery
Critical
CVE-2019-13575
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection
Medium
10a0abd6-1905-4a90-8488-29d44df7aeb9
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-25139
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
High
CVE-2019-5992
WordPress Ultra Simple Paypal Shopping Cart <= 4.4 - Cross-Site Request Forgery
High
CVE-2019-1010034
Web Librarian <= 3.5.4 - SQL Injection
High
CVE-2019-25140
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
High
CVE-2019-15324
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
High
9d2dde9f-c3c3-4e6e-a7e2-a0e511bff010
School Management System for Wordpress <= 56.0 - Cross-Site Request Forgery
High
aacd4a33-499d-4630-a0fb-8a1acfcfb7dd
WP Code Highlight.js <= 0.6.3 - Cross-Site Scripting
Medium
CVE-2019-14364
Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting
High
CVE-2019-15323
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Medium
CVE-2019-15871
LoginPress | Custom Login Page Customizer <= 1.1.13 - Unauthorized Settings Update
High
CVE-2019-13570
AdRotate – Ad manager & AdSense Ads <= 5.2 - Authenticated SQL Injection
High
CVE-2019-15828
One Click SSL <= 1.4.6 - Cross-Site Request Forgery
Critical
CVE-2019-13573
FV Flowplayer Video Player <= 7.3.18.727 - SQL Injection
Medium
1bc19bfa-ce44-4654-b074-c8126b60a155
Hybrid Composer <= 1.4.6 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2019-25060
WPGraphQL <= 0.3.4 - Information Exposure
Medium
CVE-2019-13505
Appointment Hour Booking – WordPress Booking Plugin <= 1.1.45 - Cross-Site Scripting
Medium
CVE-2019-13463
Simple Link Directory < 7.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-15829
Gallery PhotoBlocks <= 1.1.42 - Reflected Cross-Site Scripting
Medium
CVE-2019-15830
Icegram <= 1.10.28.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.